linkfox-shopee-store-follow-prize

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s stated Shopee Follow Prize purpose matches its API scope, and there is no evidence of malware, hidden execution, or unverified binaries. However, all API activity and credentials are funneled through a LinkFox-controlled proxy instead of direct Shopee endpoints, and the skill also relies on another skill for auth, so trust is transitive and broader than a simple official-API integration. Same-org hosting and documentation reduce the likelihood of malicious intent, but the proxy-centered data flow and credential forwarding make this a medium-risk skill rather than benign.

Confidence: 89%Severity: 56%
Audit Metadata
Analyzed At
Sep 15, 2026, 07:13 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-shopee-store-follow-prize%2F@0bc617b72e5c43c84c6ed9f3db77bc9ac0494e1ab885fbe5a575f61363954492